CVE-2025-13755

Published May 26, 2026

Last updated 22 days ago

Overview

Description
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes DB2 Connect Server) stores potentially sensitive information in log files that could be read by a local user.
Source
psirt@us.ibm.com
NVD status
Analyzed
Products
db2

Risk scores

CVSS 3.1

Type
Primary
Base score
5.5
Impact score
3.6
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity
MEDIUM

Weaknesses

psirt@us.ibm.com
CWE-532

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.